2939 matches found
CVE-2024-50195
In the Linux kernel, the following vulnerability has been resolved: posix-clock: Fix missing timespec64 check in pcclocksettime As Andrew pointed out, it will make sense that the PTP core checked timespec64 struct's tvsec and tvnsec range before calling ptp-info-settime64. As the man manual of...
CVE-2024-50195
The CVE-2024-50195 entry is supported by connected documents showing a Linux kernel fix for posix-clock: missing timespec64 range check in pc_clock_settime(). The root cause was that timespec64_valid() only validates the structure, not the value range, so pc_clock_settime() now performs a strict ...
CVE-2024-50195 posix-clock: Fix missing timespec64 check in pc_clock_settime()
In the Linux kernel, the following vulnerability has been resolved: posix-clock: Fix missing timespec64 check in pcclocksettime As Andrew pointed out, it will make sense that the PTP core checked timespec64 struct's tvsec and tvnsec range before calling ptp-info-settime64. As the man manual of...
CVE-2024-50181
CVE-2024-50181 is rejected/withdrawn and not an active vulnerability entry.
The vulnerability of the clk component in the Linux operating system’s kernel allows a hacker to trigger a service failure.
The vulnerability of the clk component in the Linux operating system’s kernel is related to improper memory release before deleting the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure...
WordPress Countdown & Clock plugin <= 3.0.8 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Hwang Se-yeon in WordPress Plugin Countdown & Clock versions = 3.0.8...
WordPress Countdown & Clock Plugin <= 2.8.1 is vulnerable to Cross Site Scripting (XSS)
Software Countdown & Clock Type Plugin Vulnerable versions = 2.8.1 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-50516 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID a62aad6194f2 Credits Hwang Se-yeon Required privilege...
SUSE CVE-2024-49907
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check null pointers before using dc-clkmgr WHY & HOW dc-clkmgr is null checked previously in the same function, indicating it might be null. Passing "dc" to "dc-hwss.applyidlepoweroptimizations", which dereferenc...
SUSE CVE-2024-49921
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check null pointers before used WHAT & HOW Poniters, such as dc-clkmgr, are null checked previously in the same function, so Coverity warns "implies that "dc-clkmgr" might be null". As a result, these pointers ne...
SUSE CVE-2024-49985
In the Linux kernel, the following vulnerability has been resolved: i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume In case there is any sort of clock controller attached to this I2C bus controller, for example Versaclock or even an AIC32x4 I2C codec, then an I2C transf...
SUSE CVE-2024-49916
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add NULL check for clkmgr and clkmgr-funcs in dcn401inithw This commit addresses a potential null pointer dereference issue in the dcn401inithw function. The issue could occur when dc-clkmgr or dc-clkmgr-funcs is...
SUSE CVE-2024-49917
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add NULL check for clkmgr and clkmgr-funcs in dcn30inithw This commit addresses a potential null pointer dereference issue in the dcn30inithw function. The issue could occur when dc-clkmgr or dc-clkmgr-funcs is...
SUSE CVE-2022-48953
In the Linux kernel, the following vulnerability has been resolved: rtc: cmos: Fix event handler registration ordering issue Because acpiinstallfixedeventhandler enables the event automatically on success, it is incorrect to call it before the handler routine passed to it is ready to handle event...
CVE-2024-49985
In the Linux kernel, the following vulnerability has been resolved: i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume In case there is any sort of clock controller attached to this I2C bus controller, for example Versaclock or even an AIC32x4 I2C codec, then an I2C transf...
DEBIAN-CVE-2024-49985
In the Linux kernel, the following vulnerability has been resolved: i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume In case there is any sort of clock controller attached to this I2C bus controller, for example Versaclock or even an AIC32x4 I2C codec, then an I2C transf...
CVE-2024-49916
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add NULL check for clkmgr and clkmgr-funcs in dcn401inithw This commit addresses a potential null pointer dereference issue in the dcn401inithw function. The issue could occur when dc-clkmgr or dc-clkmgr-funcs is...
DEBIAN-CVE-2024-49917
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add NULL check for clkmgr and clkmgr-funcs in dcn30inithw This commit addresses a potential null pointer dereference issue in the dcn30inithw function. The issue could occur when dc-clkmgr or dc-clkmgr-funcs is...
AZL-51287 CVE-2024-49917 affecting package kernel for versions less than 6.6.64.2-9
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add NULL check for clkmgr and clkmgr-funcs in dcn30inithw This commit addresses a potential null pointer dereference issue in the dcn30inithw function. The issue could occur when dc-clkmgr or dc-clkmgr-funcs is...
DEBIAN-CVE-2024-49907
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check null pointers before using dc-clkmgr WHY & HOW dc-clkmgr is null checked previously in the same function, indicating it might be null. Passing "dc" to "dc-hwss.applyidlepoweroptimizations", which dereferenc...